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Director of the Office of Consumer Affairs and 

Business Regulation 

Ten Park Plaza, Suite 5170 

Boston, MA 02116 


Re: Incident Notification 

Dear Sir or Madam: 

Our client, Imhoff and Associates, P.C. ("Imhoff’), learned on June 27, 2014, that a hard 
drive containing backup files for one of the firm’s servers was stolen from the locked trunk of an 
employee’s vehicle. Imhoff immediately notified the Santa Monica Police Department and 
began a thorough internal investigation to determine what information was contained on the hard 
drive. 


After a detailed review with outside computer forensic experts, Imhoff confirmed that the 
hard drive may have contained files with differing amounts of employee and client information, 
including name, Social Security number, driver’s license number and contact information (e.g., 
email address, mailing address and phone number). Imhoff has been working with law 
enforcement, but to date, has been unable to locate the hard drive. 

Imhoff has no reason to believe that the hard drive was stolen for the information it 
contained or that the information has been misused in any way. Although the hard drive was not 
encrypted, special software would be required in order to read most of the information on the 
hard drive. Still, as a precaution, Imhoff will begin notifying individuals affected by the incident 
on August 26, 2014 and is offering them one year of complimentary credit monitoring and 
identity theft protection services through AllClear ID. Imhoff is also providing call center 
support for those affected. 

To help prevent something like this from happening in the future, Imhoff is strengthening 
its encryption processes and enhancing its policies, procedures and staff education regarding the 
safeguarding of firm property and information. 
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Imhoff is notifying approximately twelve (12) Massachusetts residents in substantially 
the same form as the letter attached hereto. 

Please do not hesitate to contact me if you have any questions regarding this matter. 
Sincerely, 

Enclosure 

cc: Attorney General 

Office of the Attorney General 
One Ashburton Place 
Boston, MA 02108 
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Tanya Forsheit 
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IMHOFF & 

Associates, pc 

CRIMINAL DEFENSE ATTORNEYS 
Processing Center • P.O. Box 3825 ■ Suwanee, GA 30024 



John Q Sample 
123 Main Street 


Anytown, US 12345-6789 


August 26,2014 


Dear John Q Sample: 

Imhoff and Associates, PC (“Imhoff”) is writing to inform you of an incident that may have involved some of your 
information. 

To help you safeguard your personal information, we have arranged to have AllClear ID help you protect your 
identity for 12 months at no cost to you. The following identity protection services will be available to you 
beginning on the date of this notice, and you can use them at any time during the next 12 months. 

AllClear SECURE: The team at AllClear ID is ready to work with you to protect your identity. Because you are 
receiving this letter, you are eligible to use the AllClear SECURE service if you so choose. If a problem arises, 
simply call (877) 615-3769 and a dedicated investigator will assist you in attempting to recover financial losses and 
take steps to help restore your credit and identity to their proper condition. AllClear maintains an A+ rating at the 
Better Business Bureau. 

AllClear PRO: This service offers you additional layers of protection including credit monitoiing and a $1 million 
identity theft insurance policy. If you would like to use the AllClear PRO service, you will need to provide your 
personal information to AllClear ID. You may sign up for the AllClear PRO service online at enroll.allclearid.com 
or by phone by calling (877) 615-3769 using the following redemption code: 9999999999. 

Please note: Additional steps may be required by you in order to activate your phone alerts. 

We also recommend that you carefully check your credit reports for accounts you did not open or for inquiries from 
creditors you did not initiate. If you see anything you do not understand, call the credit agency immediately. If you 
find any suspicious activity on your credit reports, call the police. Also, please review the enclosed “Information 
about Identity Theft Protection” reference guide on the back of this letter, which describes additional steps to help 
protect yourself’ including recommendations by the Federal Trade Commission regarding identity theft protection 
and details on how to place a fraud alert or a security freeze on your credit file. 

If you have further questions or concerns about this incident, please call (877) 615-3769, Monday through Saturday, 
8:00 a.m. to 8:00 p.m. Central Standard Time (closed on U.S. observed holidays). We sincerely regret any 
inconvenience or concern caused by this incident. 

Sincerely, 


Vincent M. Imhoff 
Managing Director 
Imhoff & Associates, PC 



Information about Identity Theft Protection 


We recommend that you regularly review statements from your accounts and periodically obtain your credit report 
from one or more of the national credit reporting companies. 

You may obtain a free copy of your credit report online at www.annualcreditreport.com, by calling toll-free 
1-877-322-8228, or by mailing an Annual Credit Report Request Form (available at www.annualcreditreport.com) 
to: Annual Credit Report Request Service, P.0, Box 105281, Atlanta, GA, 30348-5281. You may also purchase a 
copy of your credit report by contacting one or more of the three national credit reporting agencies listed below. 


Equifax 

P.O. Box 740241 
Atlanta, GA 30374-0241 
800-685-1111 
www.equifax.com 


Experian 
P.O. Box 9532 
Allen, TX 75013 
888-397-3742 
www. exp erian. com 


TransUnion 
P.O. Box 6790 
Fullerton, CA 92834-6790 
800-916-8800 
www.transunion.com 


You should remain vigilant with respect to reviewing your account statements and credit reports, and you should 
promptly report any suspicious activity or suspected identity theft to us and to the proper law enforcement 
authorities, including local law enforcement, your state’s attorney general, and/or the Federal Trade Commission 
(“FTC”). Under Massachusetts law, you have the right to obtain any police report filed in regard to this incident. 
You may contact the FTC or your state’s regulatory authority to obtain additional information about avoiding and 
protection against identity theft: Federal Trade Commission, Consumer Response Center 600 Pennsylvania Avenue, 
NW, Washington, DC 20580, 1-877-IDTHEFT (438-4338), www.ftc.gov/idtheft. 

Fraud Alerts: There are also two types of fraud alerts that you can place on your credit report to put your creditors 
on notice that you may be a victim of fraud: an initial alert and an extended alert. You may ask that an initial 
fraud alert be placed on your credit report if you suspect you have been, or are about to be, a victim of identity theft. 
An initial fraud alert stays on your credit report for at least 90 days. You may have an extended alert placed on 
your credit report if you have already been a victim of identity theft with the appropriate documentary proof. An 
extended fraud alert stays on your credit report for seven years. You can place a fraud alert on your credit report by 
contacting any of the three national credit reporting agencies at the toll-free numbers listed below: 

Equifax Experian TransUnion 

877-478-7625 888-397-3742 800-680-7289 

Credit Freezes: You may have the right to put a credit freeze, also known as a security freeze, on your credit file, 
so that no new credit can be opened in your name without the use of a HN number that is issued to you when you 
initiate a freeze. A credit freeze is designed to prevent potential credit grantors from accessing your credit report 
without your consent. If you place a credit freeze, potential creditors and other third parties will not be able to get 
access to your credit report unless you temporarily lift the freeze. Therefore, using a credit freeze may delay your 
ability to obtain credit. In addition, you may incur fees to place, lift and/or remove a credit freeze. Credit freeze 
laws vary from state to state. The cost of placing, temporarily lifting, and removing a credit freeze also varies by 
state, generally $5 to $20 per action at each credit reporting company. Unlike a fraud alert, you must separately 
place a credit freeze on your credit file at each credit reporting company. Since the instructions for how to establish 
a credit freeze differ from state to state, please contact the three major credit reporting companies as specified below 
to find out more information. 


Equifax 

P.O. Box 105788 
Atlanta, GA 30348 
www.equifex.com 


Experian 
P.O. Box 9554 
Allen, TX 75013 
www.experian.com 


TransUnion 

Fraud Victim Assistance Division 
P.O. Box 6790 
Fullerton, CA 92834-6790 
www. transunion, com 



You can obtain more information about fraud alerts and credit freezes by contacting the FTC or one of the national 
credit reporting agencies listed above. 
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